ComfyUI-Manager

wangbo/ComfyUI-Manager

Fork 0

mirror of https://github.com/Comfy-Org/ComfyUI-Manager.git synced 2026-07-27 02:27:30 +08:00

Files

T

History

Dr.Lt.Data 4f1025ee67

CI / Validate OpenAPI Specification (push) Has been cancelled

Details

CI / Code Quality Checks (push) Has been cancelled

Details

Python Linting / Run Ruff (push) Has been cancelled

Details

test(security): unit regression guards for legacy security_level gate paths

Adds tests/test_legacy_secgate_other_paths.py — non-e2e unit guards for the
OTHER legacy security_level gate paths uncovered by GOAL #346's audit
(GOAL #347 / [#347-sub-2]):
  P1 middle+ batch-install entry gate (_install_custom_node)
  P2 unknown-pip 'block' unconditional deny (Q1)
  P3 nodepack/snapshot high+/middle (comfyui_switch_version, restore_snapshot)
  P4 model non-.safetensors high+ gate (_install_model)

Two layers, both exercise REAL code: decision-table tests drive the REAL
is_allowed_security_level (full truth table per level) + response-shape tests
invoke the REAL async handlers asserting observable 403/404/200, each deny
paired with an allow/flip. Reuses the _install_flags_testutil stub approach
(+ minimal server/nodes/folder_paths stubs and an inert get_data) so no real
server / E2E_ROOT is needed. Test-only; no production code changed.

Non-vacuity verified by mutation: weakening 'block' fails 17, weakening
middle+ fails 4.

2026-06-09 02:04:12 +09:00

cli

fix(security): harden CSRF with Content-Type gate and expand E2E coverage (#2818 )

2026-04-22 05:04:30 +09:00

common

feat(security): dedicated install flags decouple git_url/pip from security_level

2026-06-08 02:12:14 +09:00

e2e

test(e2e): real-server coverage for dedicated install flags incl. URL-form pip

2026-06-08 02:12:14 +09:00

playwright

fix(security): harden CSRF with Content-Type gate and expand E2E coverage (#2818 )